RE: Best Practice
- From: "Poturlu Gabriel" <Gabi.Poturlu@xxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 14 Nov 2001 11:17:58 +0200
First of all ISA Server must be installed on a server with 2 Network
adapters: one to your internal network (DMZ network - ISA will be the link
between your cisco pix and dmz) and one to internet (to your cisco pix). You
should configure ISA between your Internal network and DMZ - ISA will be
your gateway for internal network. I have such a structure on production and
it works great. I heve published some servers on my internal network and it
works.
The w32time error in Application Log is not related to ISA Installation, you
must configure your server to take time information from a time server (ntp
protocol) like "cornell.edu".
If you do not wish to use Firewall Client you will have all your clients as
Secure NAT Clients and they will go out.
The Firewall Client is on your isa instalation directory on folder Clients.
Gabi
-----Original Message-----
From: Ahmad Zaidi MT-SEA [mailto:Ahmad.Zaidi@xxxxxx]
Sent: Wednesday, November 14, 2001 10:14 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Best Practice
http://www.ISAserver.org
Hi all,
Could somebody out there share with me the best practice to configure an ISA
server with 1 network card with ftp, http, https, pop3, smtp and msn
messenger. I've installed the server but I got error 14120 in Application
log and w32time (64) in System log. We have Cisco Pix that allows all the
required protocols. The ISA server is located in DMZ. The DMZ network is
"NAT"-ed by PIX Firewall with source Address hiding.
We also have 2 other networks (Inside network and more-secure-than-DMZ
network) accessing internet through the ISA.. Is it the best way for me to
locate the ISA in inside network?
Can I not use Firewall Client but still achieve the above requirement?
Can anybody direct me to a good link for firewall client?
thank you very much in advance.
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
Gabi.Poturlu@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
